Tag: CISA

Only 39% of security managers using AI have seen how it improves their reporting speed

A recent report from Splunk indicates that more than two-thirds of Chief Information Security Officers (CISOs) consider investing in AI-driven cybersecurity capabilities a crucial priority. However, despite this consensus, only 39% of CISOs who have implemented AI partially or fully claim to have noticed a significant increase in their teams’ reporting speed. AI, what is it for? The adoption of AI in cybersecurity brings important concerns. 83% of CISOs are worried about the “hallucinations” of the […]

A recent report from Splunk indicates that more than two-thirds of Chief Information Security Officers (CISOs) believe that investing in AI-driven cybersecurity capabilities is a crucial priority. However, despite this consensus, only 39% of CISOs who have implemented AI partially or fully report that they have noticed a significant increase in their teams’ reporting speed.

AI, what is it for?

The adoption of AI in cybersecurity brings significant concerns. An 83% of CISOs are worried about the “hallucinations” of AI models and the lack of human oversight, as well as the legal liability that may arise from the actions of these agents. Additionally, data breaches are seen as the main concern by more than 75% of respondents, and 90% of those using generative AI view shadow AI as a primary challenge.

CISOs face multiple challenges in their work, with the increasing sophistication of threat actors (95%) and rapid technological evolution (89%) being the most concerning. Changes in the regulatory environment (76%) and labor shortages (47%) add another layer of complexity, while only 1% believe that new technologies are the best solution to the skills gap in their team.

Despite these challenges, 82% of CISOs believe that AI can accelerate data analysis, and 63% are confident that it can mitigate personnel gaps. With the growing use of AI, Splunk recommends that CISOs prioritize communicating their work in a way that is understandable to the rest of the company, and emphasize clear governance of AI to protect security operations in an increasingly complex environment.

CISA has asked federal agencies to abandon firewalls and routers

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an order directed at federal agencies to cease the use of edge devices, such as firewalls and routers, that are no longer supported by their manufacturers. This measure aims to address the persistent vulnerabilities of these devices, which are known to be frequent access points for cyber attackers. CISA does not cease Under this directive, federal executive agencies must conduct an inventory of the devices in their systems that have become unsupported within three months. Additionally, they must replace […]

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an order directed at federal agencies to cease the use of edge devices, such as firewalls and routers, that are no longer supported by their manufacturers. This measure aims to address the persistent vulnerabilities of these devices, which are known to be frequent access points for cyber attackers.

The CISA does not cease

By virtue of this directive, federal executive agencies must conduct an inventory of the devices in their systems that have become unsupported within a period of three months. Additionally, they must replace these devices with others that are supported within the course of a year. CISA has highlighted that maintaining unsupported devices on enterprise networks poses a significant risk to federal cybersecurity.

The acting director of CISA, Madhu Gottumukkala, emphasized that “unsupported devices pose a serious risk to federal systems and should not remain on networks.” Although CISA does not have the authority to compel agencies to comply with its orders, the organization works collaboratively with them to strengthen cyber resilience and suggests that non-federal entities follow these guidelines.

The announcement comes in a context of growing concern over cyber campaigns that threaten both public and private sectors, putting the security and privacy of American citizens at risk. CISA has observed that outdated devices are frequently used by hackers as a gateway to federal information system networks. Therefore, agencies are urged to develop a process that allows them to regularly identify devices that have become or are about to become unsupported within two years.

Linux has a critical vulnerability, even if no one really knows how it is being exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added the vulnerability CVE-2025-32463 to its catalog of Known Exploited Vulnerabilities (KEV). This critical flaw affects Sudo versions prior to 1.9.17p1 and has a CVSS score of 9.3, placing it in the high severity category. The first alerts about this vulnerability were issued in July 2025 by researcher Rich Mirch from Stratascale. A very serious vulnerability to address CISA warns that this vulnerability can be exploited by local attackers to execute arbitrary commands with root privileges, taking advantage of […]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added the vulnerability CVE-2025-32463 to its catalog of Known Exploited Vulnerabilities (KEV). This critical flaw affects Sudo versions prior to 1.9.17p1 and has a CVSS score of 9.3, placing it in the high severity category. The first alerts about this vulnerability were issued in July 2025 by researcher Rich Mirch from Stratascale.

A very serious vulnerability to fix

CISA warns that this vulnerability can be exploited by local attackers to execute arbitrary commands with root privileges, taking advantage of the -R (–chroot) option of Sudo, even if such commands are not listed in the sudoers file. This makes it a potentially devastating attack vector for systems that rely on Sudo for privilege management.

According to recent reports, there is evidence of active exploitation of this vulnerability in the real world, although the exact details of how these attacks are being carried out and who is responsible have not yet been clarified. This lack of information may indicate the urgency with which system administrators must act to mitigate the risk.

Agencies of the Federal Civilian Executive Branch (FCEB) are being specifically warned to implement mitigation measures before October 20, 2025, to protect their networks from potential intrusions. In addition to CVE-2025-32463, CISA has also included four other vulnerabilities in its catalog, highlighting the importance of cybersecurity in the current landscape.

System administrators are urged to review their Sudo implementations and apply all necessary updates to ensure the integrity of their networks against this and other imminent threats. Prompt attention to these warnings could make a difference in preventing significant intrusions.

Avast Free Antivirus DOWNLOAD

Sean Plankey is emerging as the ideal candidate for CISA

The current vacancy in the leadership of the Cybersecurity and Infrastructure Security Agency (CISA) represents a serious national risk to the cybersecurity of the United States. In the face of a growing cyber threat affecting both personal data and business operations, the Senate is being urged to confirm Sean Plankey as the next director of CISA. Plankey is recognized for his extensive experience and qualifications in the field of cybersecurity. The growth of cyber threats His background includes significant roles in the Department of Energy and the White House, where he was responsible for maritime cybersecurity policy and […]

The current vacancy in the leadership of the Cybersecurity and Infrastructure Security Agency (CISA) represents a serious national risk to the cybersecurity of the United States. In light of a growing cyber threat affecting both personal data and business operations, the Senate is being urged to confirm Sean Plankey as the next director of CISA. Plankey is recognized for his extensive experience and qualifications in the field of cybersecurity.

The growth of cyber threats

His career includes significant roles in the Department of Energy and the White House, where he was responsible for maritime cybersecurity policy and the Pacific at the National Security Council. During his time in these positions, Plankey contributed to the formulation of strategic plans such as the National Maritime Cybersecurity Plan and worked closely with government agents and the private sector to improve the security of the country’s critical infrastructure.

With the cyber threat continuously evolving, cybersecurity leaders face complex and urgent challenges. The current geopolitical situation and the increasing use of artificial intelligence by attackers highlight the need for strong and skilled leadership at the helm of CISA. Collaboration between the public and private sectors is essential to strengthen cybersecurity measures and respond quickly to emerging threats.

Sean Plankey has the necessary capability to lead CISA and is ready to act from day one. His experience prioritizing national security and his understanding of how to navigate government agencies are qualities that position him as the ideal candidate in times of cyber volatility. With the support of the cybersecurity community, it is urgent that the Senate confirms his appointment, which will not only fill a critical leadership gap but also strengthen the digital defense of the United States.